Portforwarding with ReadyNAS Ultra 2 Plus and DGND3700

[Scubbie]

I am wondering if someone can spot what I have done wrong please and provide some guidance to resolving this issue I have. I have a ReadyNAS Ultra 2 Plus and a DGND3700. Using FileZilla I can access the drive locally and copy files to and from it without any issues, as shown below. I have removed the IP addresses, port numbers, username and DynDNS address from the details below, they are all fine though.

Status:	Connecting to 192.168.xx.xx:nnnn...
Status:	Connection established, waiting for welcome message...
Response:	220 ProFTPD 1.3.3c Server (NETGEAR ReadyNAS) [192.168.xx.xx]
Command:	USER #####
Response:	331 Password required for #####
Command:	PASS *********
Response:	230 User ##### logged in
Command:	SYST
Response:	215 UNIX Type: L8
Command:	FEAT
Response:	211-Features:
Response:	 MDTM
Response:	 MFMT
Response:	 TVFS
Response:	 UTF8
Response:	 AUTH TLS
Response:	 MFF modify;UNIX.group;UNIX.mode;
Response:	 MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.mode*;UNIX.owner*;
Response:	 LANG en-US*
Response:	 PBSZ
Response:	 PROT
Response:	 SITE MKDIR
Response:	 SITE RMDIR
Response:	 SITE UTIME
Response:	 SITE SYMLINK
Response:	 REST STREAM
Response:	 SIZE
Response:	211 End
Command:	OPTS UTF8 ON
Response:	200 UTF8 set to on
Status:	Connected
Status:	Retrieving directory listing...
Command:	PWD
Response:	257 "/" is the current directory
Command:	TYPE I
Response:	200 Type set to I
Command:	PASV
Response:	227 Entering Passive Mode (192,168,xx,xx,146,199).
Command:	MLSD
Response:	150 Opening ASCII mode data connection for MLSD
Response:	226 Transfer complete
Status:	Directory listing successful

When Accessing from a remote location, with the same log in details, I get the following response:

Status:	Resolving address of #####.#########.###
Status:	Connecting to 94.8.xxx.xxx:nnnn...
Status:	Connection established, waiting for welcome message...
Response:	220 ProFTPD 1.3.3c Server (NETGEAR ReadyNAS) [192.168.xx.xx]
Command:	USER #####
Response:	331 Password required for ######
Command:	PASS *********
Response:	230 User #### logged in
Command:	SYST
Response:	215 UNIX Type: L8
Command:	FEAT
Response:	211-Features:
Response:	 MDTM
Response:	 MFMT
Response:	 TVFS
Response:	 UTF8
Response:	 AUTH TLS
Response:	 MFF modify;UNIX.group;UNIX.mode;
Response:	 MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.mode*;UNIX.owner*;
Response:	 LANG en-US*
Response:	 PBSZ
Response:	 PROT
Response:	 SITE MKDIR
Response:	 SITE RMDIR
Response:	 SITE UTIME
Response:	 SITE SYMLINK
Response:	 REST STREAM
Response:	 SIZE
Response:	211 End
Command:	OPTS UTF8 ON
Response:	200 UTF8 set to on
Status:	Connected
Status:	Retrieving directory listing...
Command:	PWD
Response:	257 "/" is the current directory
Command:	TYPE I
Response:	200 Type set to I
Command:	PASV
Response:	227 Entering Passive Mode (192,168,xx,xx,207,101).
Status:	Server sent passive reply with unroutable address. Using server address instead.
Command:	MLSD
Error:	Connection timed out
Error:	Failed to retrieve directory listing

On the DGND3700 I have forwarded the relevant port, using the following setting:

Service Name: NAS Ultra 2
Service Type: TCP/UDP
Starting Port: nnnn
Ending Port: nnnn
Server IP Address: 192.168.xx.xx

I can't use port #21 as this is used by my router for an external drive. I can connect to the external drive successfully from the remote location.

FTP has been enabled on the NAS drive. I have double triplele checked that the port numbers are the same. There are no errors listed in the Router's log.

[StephenB]

Under FileZilla's settings -
Look at "passive mode",and make sure "Use the server's external IP address instead" is checked.

[Scubbie]

Thank you for your response StephenB.

Unfortunately that seems to be what I had selected.

[StephenB]

Scubbie wrote:
Thank you for your response StephenB. Unfortunately that seems to be what I had selected.

ok, I hadn't scrolled your logs enough to see that. Sorry.

What is odd about the two traces is that you are using very different passive ports.
-The local log on uses port 37575 [Response: 227 Entering Passive Mode (192,168,xx,xx,146,199)] (146*256+199 => 37575)
-The internet log on uses port 53093 [Response: 227 Entering Passive Mode (192,168,xx,xx,207,101)] (207*256+101 => 53093)

This suggests that perhaps the passive port range configured on the NAS is too large? All the passive ports configured on the ReadyNAS must be forwarded to the NAS in the router. I have 4 passive ports configured, which works ok for me (I normally only have one FTP connection running at a time).

[Scubbie]

No problem. I should perhaps make it clear that the PC that is working remotely is in a different location and I'm using LogMeIn to access it. The local computer is the one I'm using to respond to this thread, which is on the same LAN as the NAS drive.

I haven't changed the passive port range on the NAS drive. The default settings have it using 1024-65535.

[StephenB]

Scubbie wrote:
...I haven't changed the passive port range on the NAS drive. The default settings have it using 1024-65535.

Which is why it is failing :shock:

Try setting it to a much smaller range (say 50100-50120) and forward that full range from the router to the NAS

Any ports > 49151 are "private" ports (not assigned to well known services).

(edited - there was a similar thread related to FTP backup between NAS's, I accidentally mixed the two...)

[Scubbie]

Many thanks for that. 😄

I have also opened the passive portspecificallyly for the NAS drive and it opened up first time from the remote computer.

Thank you very much.

P.S. I'd been busy the last couple of days, hence delay in getting back to read this.